Multipath link optimization for private mobile network
Some embodiments of the invention provide a method for link optimization in an SD-PMN defined over at least a first site of a first entity and a second site of a PMN-provider. The method configures a first portion of the SD-PMN deployed at the first entity's first site, the first portion of the SD-PMN including at least one or more physical access points for connecting user devices at the first entity's first site to the SD-PMN and one or more control plane components of the SD-PMN. The method configures a first edge router deployed at the first entity's first site to use multiple links including at least one commercial Internet network link between the first edge router and a gateway router deployed in the PMN-provider second site to reach the PMN-provider second site and to perform a multi-link optimization process on the multiple links to establish a secure tunnel for use in communicating with the gateway router.
1 . A method for link optimization in an SD-PMN (software-defined private mobile network) defined over at least a first site of a first entity and a second site of a PMN-provider, the method comprising:
configuring a first portion of the SD-PMN deployed at the first entity's first site, the first portion of the SD-PMN comprising at least (i) one or more physical access points for connecting user devices at the first entity's first site to the SD-PMN and (ii) one or more control plane components of the SD-PMN; and
configuring a first edge router deployed at the first entity's first site (i) to use a plurality of links between the first edge router and a gateway router deployed in the PMN-provider second site to reach the PMN-provider second site and (ii) to perform a multi-link optimization process on the plurality of links to establish a secure tunnel for use in communicating with the gateway router deployed in the PMN-provider second site, wherein the plurality of links comprises at least one commercial Internet network link,
wherein the PMN-provider second site comprises a primary PMN-provider second site assigned to the first entity's first site, the plurality of links between the first edge router and the gateway router is a first plurality of links, and the gateway router deployed in the PMN-provider second site is a first gateway router, wherein the method further comprises configuring the first edge router deployed at the first entity's first site (i) to use a second plurality of links between the first edge router and a second gateway router deployed in a secondary PMN-provider third site to reach the PMN-provider third site upon detecting that the secure tunnel between the first edge router and the gateway router is down and (ii) to perform the multi-link optimization process on the second plurality of links to establish a secure tunnel for use in communicating with the second gateway router deployed in the PMN-provider third site.
2 . The method of claim 1 , wherein the PMN-provider second site comprises a first PMN-provider cloud datacenter in a plurality of PMN-provider cloud datacenters.
3 . The method of claim 2 , wherein the first PMN-provider cloud datacenter comprises a first public PMN-provider cloud datacenter a plurality of public PMN-provider cloud datacenters.
4 . The method of claim 2 , wherein the first PMN-provider cloud datacenter comprises a first private PMN-provider cloud datacenter in a plurality of private PMN-provider cloud datacenters.
5 . The method of claim 1 , wherein the at least one commercial Internet network link is provided by an Internet service provider (ISP).
6 . The method of claim 1 , wherein:
the SD-PMN is a multi-tenant SD-PMN, and
the first entity is one of a plurality of entities serviced by the SD-PMN.
7 . The method of claim 6 , wherein:
the first entity's first site is one of a plurality of sites belonging to the first entity, and
each entity in the plurality of entities serviced by the SD-PMN comprises at least one site.
8 . The method of claim 1 , wherein the one or more control plane components deployed at the first entity's first site comprise a security gateway, a user-plane function (UPF), an AMF (access and mobility management function), and an SMF (session management function).
9 . The method of claim 8 , wherein:
the one or more control plane components deployed at the first entity's first site comprise a first portion of control plane components, and
a second portion of the control plane components are configured at the PMN-provider second site, the second portion of the control plane components comprising a subscriber database that stores data associated with users of the SD-PMN including data associated with users associated with the user devices at the first entity's first site.
10 . The method of claim 1 , wherein the one or more control plane components deployed at the first entity's first site comprise a user-plane function (UPF).
11 . The method of claim 10 , wherein:
the one or more control plane components deployed at the first entity's first site comprise a first portion of control plane components, and
a second portion of the control plane components are configured at the PMN-provider second site, the second portion of the control plane components comprising a security gateway, an AMF (access and mobility management function), an SMF (session management function), and a subscriber database that stores data associated with users of the SD-PMN including data associated with users associated with the user devices at the first entity's first site.
12 . The method of claim 1 , further comprising configuring the first edge router deployed at the first entity's first site to receive a list of SD-WAN gateways associated with multiple SD-WAN PoPs of the SD-PMN to which the SD-WAN edge router can connect, wherein the gateway router and the second gateway router are both identified in the list of SD-WAN gateways.
13 . The method of claim 12 ,
wherein configuring the first edge router deployed at the first entity's first site to use the plurality of links includes configuring the first edge router to direct traffic to a particular IP address in the PMN-provider second site, and
wherein configuring the first edge router deployed at the first entity's first site to use the second plurality of links includes configuring the first edge router to direct traffic to the same particular IP address in the PMN-provider third site.
14 . A non-transitory machine readable medium storing a program for execution by a set of processing units, the program for link optimization in an SD-PMN (software-defined private mobile network) defined over at least a first site of a first entity and a second site of a PMN-provider, the program comprising sets of instructions for:
configuring a first portion of the SD-PMN deployed at the first entity's first site, the first portion of the SD-PMN comprising at least (i) one or more physical access points for connecting user devices at the first entity's first site to the SD-PMN and (ii) one or more control plane components of the SD-PMN; and
configuring a first edge router deployed at the first entity's first site (i) to use a plurality of links between the first edge router and a gateway router deployed in the PMN-provider second site to reach the PMN-provider second site and (ii) to perform a multi-link optimization process on the plurality of links to establish a secure tunnel for use in communicating with the gateway router deployed in the PMN-provider second site, wherein the plurality of links comprises at least one commercial Internet network link,
wherein the PMN-provider second site comprises a primary PMN-provider second site assigned to the first entity's first site, the plurality of links between the first edge router and the gateway router is a first plurality of links, and the gateway router deployed in the PMN-provider second site is a first gateway router, wherein the program further comprises sets of instructions for configuring the first edge router deployed at the first entity's first site (i) to use a second plurality of links between the first edge router and a second gateway router deployed in a secondary PMN-provider third site to reach the PMN-provider third site upon detecting that the secure tunnel between the first edge router and the gateway router is down and (ii) to perform the multi-link optimization process on the second plurality of links to establish a secure tunnel for use in communicating with the second gateway router deployed in the PMN-provider third site.
15 . The non-transitory machine readable medium of claim 14 , wherein:
the PMN-provider second site comprises a first PMN-provider cloud datacenter in a plurality of PMN-provider cloud datacenters; and
the first PMN-provider cloud datacenter comprises a first public PMN-provider cloud datacenter a plurality of public PMN-provider cloud datacenters.
16 . The non-transitory machine readable medium of claim 14 , wherein:
the PMN-provider second site comprises a first PMN-provider cloud datacenter in a plurality of PMN-provider cloud datacenters; and
the first PMN-provider cloud datacenter comprises a first private PMN-provider cloud datacenter in a plurality of private PMN-provider cloud datacenters.
17 . The non-transitory machine readable medium of claim 14 , wherein the at least one commercial Internet network link is provided by an Internet service provider (ISP).
18 . The non-transitory machine readable medium of claim 14 , wherein:
the SD-PMN is a multi-tenant SD-PMN,
the first entity is one of a plurality of entities serviced by the SD-PMN,
the first entity's first site is one of a plurality of sites belonging to the first entity, and
each entity in the plurality of entities serviced by the SD-PMN comprises at least one site.
19 . The non-transitory machine readable medium of claim 14 , wherein the one or more control plane components deployed at the first entity's first site comprise a security gateway, a user-plane function (UPF), an AMF (access and mobility management function), and an SMF (session management function).
20 . The non-transitory machine readable medium of claim 19 , wherein:
the one or more control plane components deployed at the first entity's first site comprise a first portion of control plane components, and
a second portion of control plane components are configured at the PMN-provider second site, the second portion of the control plane components comprising a subscriber database that stores data associated with users of the SD-PMN including data associated with users associated with the user devices at the first entity's first site.
21 . The non-transitory machine readable medium of claim 14 , wherein:
the one or more control plane components deployed at the first entity's first site comprise a first portion of control plane components that includes a user-plane function (UPF); and
a second portion of control plane components are configured at the PMN-provider second site, the second portion of the control plane components comprising a security gateway, an AMF (access and mobility management function), an SMF (session management function), and a subscriber database that stores data associated with users of the SD-PMN including data associated with users associated with the user devices at the first entity's first site.